> For clean Markdown of any page, append .md to the page URL.
> For a complete documentation index, see https://docs.coinflow.cash/llms.txt.
> For AI client integration (Claude Code, Cursor, etc.), connect to the MCP server at https://docs.coinflow.cash/_mcp/server.

# Debit Card Tokenization

## Overview

Debit card tokenization is essential for implementing push-to-card payouts while maintaining PCI DSS compliance. Coinflow provides multiple tokenization methods depending on your platform and compliance requirements.

> **Info**
>
> **Note:** This guide covers debit card tokenization for push-to-card payouts only. For credit/debit card tokenization for payments, see [Tokenize Credit Cards](/guides/developer-resources/checkout-implementation/credit-cards-implementation/tokenize-credit-cards).

---

## Tokenization Methods

Coinflow offers three approaches to tokenize debit cards, each suited for different use cases:

#### [SDK-Based Tokenization](/recipes/recipes/tokenize-debit-cards-for-withdraws)

**Recommended**

Use the `CoinflowCardOnlyInput` component to securely collect and tokenize debit card details in your application.

**Key Benefits:**

* No PCI compliance requirements
* Available across all SDKs (React, Vue, Angular, React Native)
* Automatic card validation and security

#### [API for Web Apps](/recipes/recipes/tokenize-card-data-via-api-for-debit-card-payouts)

For web applications requiring server-to-server tokenization. Requires proof of PCI DSS compliance.

**Requirements:**

* Valid Attestation of Compliance (AOC) document
* AOC reviewed by a QSA for service providers
* Merchant-specific or service provider AOC

**AOC Examples:**

* [Merchant AOC Template](https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Reporting%20Template%20or%20Form/PCI-DSS-v4-0-1-ROC-AOC-Merchants.pdf)
* [Service Provider AOC Template](https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Reporting%20Template%20or%20Form/PCI-DSS-v4-0-1-ROC-AOC-Service-Providers.pdf)

---

## Choosing the Right Method

| Use Case                              | Recommended Method     | PCI Compliance Required |
| ------------------------------------- | ---------------------- | ----------------------- |
| Web applications                      | SDK-Based Tokenization | No                      |
| Web apps with existing PCI compliance | API for Web Apps       | Yes                     |